NetApp Linux Kernel CVE-2020-36313 Vulnerability Advisory

Key Information Vulnerability Overview Advisory ID: NTAP-20210604-0005 CVE: CVE-2020-36313 Version: 4.0 Last Updated: 05/01/2024 Status: Final Vulnerability Description Summary: Multiple NetApp products incorporate Linux kernel. Linux Kernel versions prior to 5.7 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Impact Impact: Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Vulnerability Scoring Details CVE: CVE-2020-36313 CVSS Score: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Public Disclosure and Exploitation Exploitation and Public Disclosure: NetApp is aware of public disclosure. However, NetApp is not aware of active exploitation of this vulnerability. References References: NetApp will continue to monitor public sources for more information regarding this vulnerability, and will update this advisory if there are any changes. Additional Information This advisory should be considered in combination with advisories regarding Full Disk Encryption or Secure Fileshares for disk vols, when used on NetApp products and versions.

Goal Reached Thanks to every supporter — we hit 100%!

NetApp Linux Kernel CVE-2020-36313 Vulnerability Advisory